Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-0800
HistoryApr 23, 2009 - 5:30 p.m.

CVE-2009-0800

2009-04-2317:30:01
Debian Security Bug Tracker
security-tracker.debian.org
25

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.136

Percentile

95.6%

Multiple β€œinput validation flaws” in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.136

Percentile

95.6%